142 matches found
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: kube-vip, cni-plugins...
GO-2026-6237 vulnerabilities
Vulnerabilities for packages: cni-plugins, kube-vip, amazon-k8s-cni-fips, cni-plugins-fips, kube-vip-fips...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, kubeflow-katib, mongo-tools, thanos, kube-bench, bom, thanos-operator, dive, kubeflow-pipelines, pulumi-language-java, flux-image-reflector-controller, flux-image-automation-controller, kubernetes-csi-external-resizer,...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: nfs-subdir-external-provisioner, nri-prometheus, kubeflow-katib, mongo-tools, thanos, kube-bench, bom, thanos-operator, dive, kubeflow-pipelines, pulumi-language-java, flux-image-reflector-controller, flux-image-automation-controller, kubernetes-csi-external-resizer,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: prometheus, nri-prometheus, kubernetes, step, nova, kubeflow-katib, certificate-transparency, local-static-provisioner, harbor, juicefs, thanos, opencost, victoriametrics-cluster, telegraf, thanos-operator, cilium, kubernetes-csi-node-driver-registrar, dive, ini-file...
GO-2023-2382 vulnerabilities
Vulnerabilities for packages: k3d, aactl, cortex, kubeflow-katib, wait-for-port, grpcurl, docker-cli, dgraph, amass, mage, local-path-provisioner, render-template, sonobuoy, vertical-pod-autoscaler, sbom-scorecard, aws-flb-cloudwatch, cass-operator, hey, nsc, protoc-gen-go-grpc, configmap-reload,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: prometheus, nova, docker-cli-buildx, kubeflow-katib, chart-testing, mongo-tools, k8sgateway, kube-bench, bom, thanos-operator, polaris, kubernetes-dashboard-web, dive, ini-file, yunikorn-k8shim, rabbitmq-default-user-credential-updater, kube-logging-operator,...
CLEANSTART-2026-IL06995 Security fixes in cni-plugins-fips 1.8.0-r0
Package cni-plugins-fips version 1.8.0-r0 fixes 2 vulnerabilities: CVE-2025-61729, CVE-2025-61727...
CLEANSTART-2026-OZ77576 Security fixes in cni-plugins 1.9.0-r0
Package cni-plugins version 1.9.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-25681 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
Important: cni-plugins
Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Affected Packages: cni-plugins Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1888)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1888 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has extracted the preceding description block directly from the tested product...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3386 (ALAS-2026-3386)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3386 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has...
Amazon Linux 2023 : cni-plugins (ALAS2023-2026-1723)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1723 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value refresh. A new GODEBU...
Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3311 (ALAS-2026-3311)
The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3311 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...
Important: cni-plugins
Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...